feature: reinforce trust_remote_code=False

[leondz]

This change sets trust_remote_code to false regardless of HF function default, unless explicitly enabled in garak config

resolves #991

[jmartin-tech]

Terrific! Secure by default is definitely a good way to go. One minor expansion since the PegasusT5 class already enforced a value it may be worth "exposing".

Will do some validation testing in the next day to ensure this does not produce regressions in various HFCompatible configurations.

[jmartin-tech]

Basic sanity testing shows this passing correctly to huggingface pipeline generator instances with the following configuration file.

enable_remote.yaml

plugins:
  generators:
    huggingface:
      hf_args:
        trust_remote_code: true